Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1FH72_ui2GATkQiuf9gEzCOXhR8.roa
File: 1FH72_ui2GATkQiuf9gEzCOXhR8.roa (raw, json)
Hash identifier: Zm2hoeKP1hZx4k0Fxzqd19qEeHoxde4WJ8NKVV2PPwE=
Subject key identifier: D4:51:FB:DB:FB:A2:D8:60:13:91:08:AE:7F:D8:04:CC:23:97:85:1F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186873AFC579ABCC7BA7437828C847A8E08
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1FH72_ui2GATkQiuf9gEzCOXhR8.roa
Signing time: Sat 25 Feb 2023 06:20:35 +0000
ROA not before: Sat 25 Feb 2023 06:20:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 178.239.204.0/24 maxlen: 24
178.239.201.0/24 maxlen: 24
193.42.54.0/23 maxlen: 24
103.212.81.0/24 maxlen: 24
185.103.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:87:3a:fc:57:9a:bc:c7:ba:74:37:82:8c:84:7a:8e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 25 06:20:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d451fbdbfba2d860139108ae7fd804cc2397851f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:53:e2:6c:4a:7b:bc:11:eb:74:0d:68:21:
38:82:01:bf:90:1b:70:93:32:75:89:03:e6:a2:e7:
c0:4b:4a:09:1e:c8:1d:32:9e:47:cd:f0:7f:e1:09:
67:c4:59:a5:89:f4:7c:4b:2e:b6:1e:3e:03:56:bf:
39:4f:ae:b4:3e:42:a2:51:8c:06:f9:12:8b:0a:41:
19:e1:7e:c1:c5:18:3f:67:b6:49:b3:0e:d3:b7:89:
c1:23:de:ac:42:b2:95:84:74:63:b8:10:a5:c4:f5:
86:9c:77:f0:81:6f:d7:af:a7:2e:43:55:6f:86:a9:
55:fa:8e:7e:83:78:3e:ee:a3:27:f4:d9:e0:df:13:
21:d3:d8:5e:83:41:0d:d7:de:bd:0c:36:aa:b3:e4:
fc:da:de:60:44:93:9a:30:69:c5:e8:48:60:ee:0b:
40:46:78:8b:df:01:c0:d6:a6:44:b5:2e:b1:ae:e0:
c6:e2:07:be:8b:cd:ca:07:3e:23:d0:f2:02:e1:46:
26:da:6f:80:97:f1:49:e1:ca:49:df:c6:b5:f7:25:
62:fb:f5:d0:52:be:d2:00:b4:90:0d:08:a9:9b:1f:
ce:2e:c5:1f:06:17:d8:10:64:86:1a:8c:ed:a8:66:
a7:c1:b8:fe:b2:f0:80:41:7b:e8:b4:de:93:80:dc:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:51:FB:DB:FB:A2:D8:60:13:91:08:AE:7F:D8:04:CC:23:97:85:1F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1FH72_ui2GATkQiuf9gEzCOXhR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.81.0/24
178.239.201.0/24
178.239.204.0/24
185.103.75.0/24
193.42.54.0/23
Signature Algorithm: sha256WithRSAEncryption
14:0d:71:72:13:08:2d:84:03:11:5c:5d:38:e0:67:b3:9c:d8:
21:f5:de:83:e2:e5:44:9b:60:3d:25:17:37:77:14:65:02:f7:
42:dd:2c:21:57:93:72:e3:52:a6:59:ce:34:dd:ec:29:7c:58:
51:9f:e6:f2:6c:aa:f1:6d:27:7a:45:d5:1a:97:bc:96:81:3b:
6e:2c:44:6d:f6:f6:7f:ea:d0:bb:71:68:04:e5:38:2e:47:63:
fd:60:e3:9e:87:a7:0e:83:6b:4d:57:9b:1e:36:8b:85:ae:56:
b7:e6:76:98:b9:c2:00:58:bd:b7:3e:77:a2:fb:d0:ae:b2:18:
8a:a2:f4:eb:b3:4e:d2:8a:a8:9f:9e:e2:06:88:e0:e7:c4:84:
23:c5:56:c2:66:3e:14:f8:19:68:42:2c:3d:37:54:0c:6c:04:
e7:e7:cc:ee:90:b3:44:72:a3:f2:74:3b:72:e3:59:a8:5c:4d:
08:89:5c:cf:6c:65:71:3f:aa:7d:d9:3e:dd:af:b0:ca:70:84:
8f:21:ee:c7:df:1b:a0:2b:71:e5:31:7e:4e:a3:2c:45:98:42:
67:b7:6a:63:5c:d6:9c:30:9c:58:ef:4d:99:76:d5:4e:50:b0:
3d:5b:48:c0:71:e5:eb:bd:53:83:fd:74:0d:ab:c0:3d:a2:f8:
2a:25:13:31
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYaHOvxXmrzHunQ3goyEeo4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMjI1MDYyMDM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDUxZmJkYmZiYTJkODYwMTM5MTA4YWU3ZmQ4MDRjYzIzOTc4NTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1dT4mxKe7wR63QNaCE4ggG/kBtw
kzJ1iQPmoufAS0oJHsgdMp5HzfB/4QlnxFmlifR8Sy62Hj4DVr85T660PkKiUYwG
+RKLCkEZ4X7BxRg/Z7ZJsw7Tt4nBI96sQrKVhHRjuBClxPWGnHfwgW/Xr6cuQ1Vv
hqlV+o5+g3g+7qMn9Nng3xMh09heg0EN1969DDaqs+T82t5gRJOaMGnF6Ehg7gtA
RniL3wHA1qZEtS6xruDG4ge+i83KBz4j0PIC4UYm2m+Al/FJ4cpJ38a19yVi+/XQ
Ur7SALSQDQipmx/OLsUfBhfYEGSGGoztqGanwbj+svCAQXvotN6TgNw0GwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNRR+9v7othgE5EIrn/YBMwjl4UfMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvMUZINzJfdWkyR0FUa1FpdWY5Z0V6Q09YaFI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAZ9RRAwQA
su/JAwQAsu/MAwQAuWdLAwQBwSo2MA0GCSqGSIb3DQEBCwUAA4IBAQAUDXFyEwgt
hAMRXF044GeznNgh9d6D4uVEm2A9JRc3dxRlAvdC3SwhV5Ny41KmWc403ewpfFhR
n+bybKrxbSd6RdUal7yWgTtuLERt9vZ/6tC7cWgE5TguR2P9YOOeh6cOg2tNV5se
NouFrla35naYucIAWL23Pnei+9CushiKovTrs07SiqifnuIGiODnxIQjxVbCZj4U
+BloQiw9N1QMbATn58zukLNEcqPydDty41moXE0IiVzPbGVxP6p92T7dr7DKcISP
Ie7H3xugK3HlMX5OoyxFmEJnt2pjXNacMJxY702ZdtVOULA9W0jAceXrvVOD/XQN
q8A9ovgqJRMx
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:53 2023 by rpki-client on console-ams.rpki-client.org